snoopy is merely a shared library that is used as a wrapper

to the execve() function provided by libc as to log every call
to syslog (authpriv).  system administrators may find snoopy
useful in tasks such as light/heavy system monitoring, tracking other
administrator's actions as well as getting a good 'feel' of
what's going on in the system (for example apache running cgi
scripts).

WWW: http://sourceforge.net/projects/snoopylogger/

PR:		ports/108691
Submitted by:	Philippe Audeoud <jadawin at tuxaco.net>

6 files changed, 73 insertions, 0 deletions

diff --git a/security/Makefile b/security/Makefile
index bc76d445a85f..263b3a35dd4f 100644
--- a/security/Makefile
+++ b/security/Makefile
@@ -653,6 +653,7 @@
     SUBDIR += smtpscan
     SUBDIR += smurflog
     SUBDIR += sniff
+    SUBDIR += snoopy
     SUBDIR += snort
     SUBDIR += snort-rep
     SUBDIR += snort_inline
diff --git a/security/snoopy/Makefile b/security/snoopy/Makefile
new file mode 100644
index 000000000000..adec1e4b8044
--- /dev/null
+++ b/security/snoopy/Makefile
@@ -0,0 +1,29 @@
+# New ports collection makefile for:   snoopy
+# Date created:                3 February 2007
+# Whom:                        Philippe Audeoud <jadawin@tuxaco.net>
+# $FreeBSD$
+
+PORTNAME=	snoopy
+PORTVERSION=	1.3
+CATEGORIES=	security
+MASTER_SITES=	${MASTER_SITE_SOURCEFORGE_EXTENDED}
+MASTER_SITE_SUBDIR=	snoopylogger
+
+MAINTAINER=	jadawin@tuxaco.net
+COMMENT=	An execve() wrapper and logger
+
+PLIST_FILES=	lib/snoopy.so bin/detect
+PORTDOCS=	README
+
+post-patch:
+	@${REINPLACE_CMD} -e 's|%%PREFIX%%|${PREFIX}|' ${WRKSRC}/README
+
+do-install:
+	${INSTALL_PROGRAM} ${WRKSRC}/snoopy.so ${PREFIX}/lib
+	${INSTALL_PROGRAM} ${WRKSRC}/detect ${PREFIX}/bin
+.if !defined(NOPORTDOCS)
+	${MKDIR} ${DOCSDIR}
+	${INSTALL_DATA} ${WRKSRC}/README ${DOCSDIR}
+.endif
+
+.include <bsd.port.mk>
diff --git a/security/snoopy/distinfo b/security/snoopy/distinfo
new file mode 100644
index 000000000000..14cd9a465d00
--- /dev/null
+++ b/security/snoopy/distinfo
@@ -0,0 +1,3 @@
+MD5 (snoopy-1.3.tar.gz) = 7f1bfc5c10f05cd127b414facc43cc5f
+SHA256 (snoopy-1.3.tar.gz) = 99d60a36a42220fc4de99a69d722c736879dedde27121867a1d575fabb0404a7
+SIZE (snoopy-1.3.tar.gz) = 10423
diff --git a/security/snoopy/files/patch-Makefile b/security/snoopy/files/patch-Makefile
new file mode 100644
index 000000000000..5736f458a08f
--- /dev/null
+++ b/security/snoopy/files/patch-Makefile
@@ -0,0 +1,20 @@
+--- Makefile.orig	Thu Dec 21 07:53:15 2000
++++ Makefile	Tue Feb  6 22:35:12 2007
+@@ -1,15 +1,12 @@
+ # Makefile for snoopy
+ # $Id: Makefile,v 1.3 2000/12/10 08:50:49 marius Exp $
+ 
+-CC = gcc
+-LIBS  = -ldl
+-
+ all: snoopy.so detect
+ 
+ snoopy.so:  snoopy.c snoopy.h
+-			$(CC) -shared -O3 -fomit-frame-pointer snoopy.c -osnoopy.so $(LIBS)
++			$(CC) -shared $(CFLAGS) snoopy.c -osnoopy.so
+ detect: detect.c
+-			$(CC) detect.c -odetect $(LIBS)
++			$(CC) $(CFLAGS) detect.c -odetect
+ install: all 
+ 			install -m 755 snoopy.so /lib/snoopy.so; \
+ 			./install.sh
diff --git a/security/snoopy/files/patch-README b/security/snoopy/files/patch-README
new file mode 100644
index 000000000000..71436215d7d3
--- /dev/null
+++ b/security/snoopy/files/patch-README
@@ -0,0 +1,11 @@
+--- README.orig	Tue Feb  6 22:38:07 2007
++++ README	Tue Feb  6 22:38:22 2007
+@@ -39,7 +39,7 @@
+   the $LD_PRELOAD environment variable - simply set it to /lib/snoopy.so
+   before loading the application. For example:
+ 
+-     export LD_PRELOAD=/lib/snoopy.so
++     export LD_PRELOAD=%%PREFIX%%/lib/snoopy.so
+      lynx http://linux.com/
+      unset LD_PRELOAD 
+ 
diff --git a/security/snoopy/pkg-descr b/security/snoopy/pkg-descr
new file mode 100644
index 000000000000..4d74b5c49a09
--- /dev/null
+++ b/security/snoopy/pkg-descr
@@ -0,0 +1,9 @@
+snoopy is merely a shared library that is used as a wrapper
+to the execve() function provided by libc as to log every call
+to syslog (authpriv).  system administrators may find snoopy
+useful in tasks such as light/heavy system monitoring, tracking other
+administrator's actions as well as getting a good 'feel' of
+what's going on in the system (for example apache running cgi
+scripts).
+
+WWW: http://sourceforge.net/projects/snoopylogger/